
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/djSthmVu_mxF5O-Zj5S2l6w5vvE.mft
File: djSthmVu_mxF5O-Zj5S2l6w5vvE.mft (raw, json)
Hash identifier: PaWwgUPLuW9Awayh96FuZdKWBMlWxde+nZwcQnmSJvw=
Subject key identifier: DC:34:25:EA:C5:C1:31:EE:CE:3C:84:9A:50:11:26:37:44:4F:5A:C0
Authority key identifier: 76:34:AD:86:65:6E:FE:6C:45:E4:EF:99:8F:94:B6:97:AC:39:BE:F1
Certificate issuer: /CN=A91B23D9/serialNumber=7634AD86656EFE6C45E4EF998F94B697AC39BEF1
Certificate serial: 0184
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/djSthmVu_mxF5O-Zj5S2l6w5vvE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/djSthmVu_mxF5O-Zj5S2l6w5vvE.mft
Manifest number: 0164
Signing time: Sun 15 Nov 2026 05:17:42 +0000
Manifest this update: Sun 15 Nov 2026 05:17:42 +0000
Manifest next update: Sun 22 Nov 2026 05:17:42 +0000
Files and hashes: 1: djSthmVu_mxF5O-Zj5S2l6w5vvE.crl (hash: 4ElJa2idgUVSzXVYswZ4/o0ofm+nCgMI+MoOwRe/16w=)
2: 5FF7DA8AC9DD11EF9A19CE57C4F9AE02.roa (hash: c4VFZAceUdJlng/FeQRaHeNTf/QP511PnqvINvkog+A=)
3: 7BC585BEC9DD11EF98B1E263C4F9AE02.roa (hash: gOLrlN2EfbwTp4zsFTkIHkRkrBvQ0xLDRVKKWvZfbic=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/djSthmVu_mxF5O-Zj5S2l6w5vvE.crl
rsync://rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/djSthmVu_mxF5O-Zj5S2l6w5vvE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/djSthmVu_mxF5O-Zj5S2l6w5vvE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Nov 2026 05:17:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 388 (0x184)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B23D9, serialNumber=7634AD86656EFE6C45E4EF998F94B697AC39BEF1
Validity
Not Before: Nov 15 05:17:42 2026 GMT
Not After : Nov 22 05:17:42 2026 GMT
Subject: CN=6af94076-4624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1b:23:df:f5:39:f7:59:58:f1:2c:23:76:8b:
f5:71:f2:b4:8a:65:9b:2f:63:5c:0c:73:9d:31:06:
70:a8:69:7f:5c:fb:97:d1:0a:fb:2f:32:9a:0a:3d:
fd:46:f8:66:50:17:2c:b8:c2:c6:f5:e7:32:90:5c:
04:80:fc:d4:f9:67:a8:09:5b:6b:9a:c8:75:17:bd:
19:d7:45:f0:eb:da:b3:30:15:60:69:7d:c0:30:14:
3d:05:3b:a4:13:47:49:3f:2c:03:ae:a6:b6:ab:f5:
d8:c5:c9:80:87:4a:0e:62:ec:5b:68:57:7b:d5:15:
a2:37:7f:f8:28:84:ea:f6:d0:a5:25:84:b0:c0:5c:
45:1b:ce:ab:f3:39:dc:f7:3f:0b:3a:e7:6b:ed:98:
8a:04:e7:3c:98:19:5f:79:b8:05:c9:98:57:75:8f:
24:59:6a:d7:f6:05:2c:e6:27:64:f4:02:3b:a7:70:
a7:8a:26:19:f7:94:85:da:59:76:18:d8:5b:43:3d:
6b:51:62:f6:b3:e8:74:f9:ce:f8:13:97:90:cb:55:
b3:88:90:9d:6a:ac:b3:9a:f2:73:6c:e2:01:4a:58:
eb:aa:42:da:10:f8:bc:18:a9:7a:41:86:91:a5:16:
f9:d5:4f:60:78:ff:f5:bc:6f:63:2c:74:36:46:ca:
72:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:34:25:EA:C5:C1:31:EE:CE:3C:84:9A:50:11:26:37:44:4F:5A:C0
X509v3 Authority Key Identifier:
keyid:76:34:AD:86:65:6E:FE:6C:45:E4:EF:99:8F:94:B6:97:AC:39:BE:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/djSthmVu_mxF5O-Zj5S2l6w5vvE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/djSthmVu_mxF5O-Zj5S2l6w5vvE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/djSthmVu_mxF5O-Zj5S2l6w5vvE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:53:39:75:af:92:7f:43:dc:63:12:ff:aa:57:fc:3e:f3:2b:
3d:8a:f2:dc:ae:9f:cb:61:a3:4c:2c:e7:2a:53:5b:a3:97:20:
46:93:ce:e0:4e:89:26:91:e0:ac:ad:67:98:35:e2:c3:67:3a:
b1:f3:55:0f:03:bc:c9:c6:3a:e7:47:ee:f8:46:09:d7:5f:6e:
a1:8b:e6:05:e1:28:e3:14:97:4b:79:3b:d0:eb:7d:87:49:f9:
79:24:ef:41:1a:36:8c:f0:a1:f6:29:86:62:76:77:aa:73:d2:
4f:bb:de:d6:22:b9:a2:f1:d6:7a:79:a1:81:54:fe:16:c2:93:
d6:e7:21:fe:ab:cc:7c:c8:e1:6f:ca:72:46:49:bb:74:78:cd:
b6:88:6d:12:f8:e7:3d:c4:6c:44:57:90:f6:e7:01:97:9e:26:
83:b0:7f:be:ac:37:3b:20:6c:30:e4:e2:c5:a2:b7:e6:6d:a0:
c8:21:82:04:3a:0d:cd:5e:82:3f:e6:6e:b5:1f:55:89:28:c5:
75:60:c4:7f:b5:f3:93:8a:d6:82:e1:b0:6c:7b:db:71:cf:e3:
32:9d:54:aa:0e:83:f8:1d:a6:73:9d:1a:f5:84:d9:a0:29:6a:
b2:42:b8:86:45:f4:16:77:91:c3:f6:f5:ae:40:20:b2:0e:54:
78:1f:a2:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:19:00 2026 by rpki-client